DANCY ANTS

Privacy

Last updated 11 September 2026

THE SHORT VERSION

Who is responsible

Dancy Ants is operated by Mohamad Ghazal, a sole trader based in Lebanon. For anything in this policy — questions, requests, or complaints — write to hello@dancyants.com.

The microphone, specifically

This is the part most people want to know about, so it comes first rather than buried in a list.

Dancy Ants asks for microphone access so the visuals can react to music. When you grant it, the audio is processed entirely inside your browser: it is turned into a handful of numbers — loudness, bass, treble, beat timing — which drive the rendering on your own machine.

The audio itself is never transmitted anywhere. It is not recorded, not uploaded, not stored, and not analysed on any server. There is no server in that path at all. If you record a video inside the app, that recording is written to your own device by your own browser, and we never see it.

You can revoke microphone access at any time in your browser settings. The app keeps working; the visuals simply stop reacting to sound.

What we collect

If you never make an account

Anonymous usage statistics only — see “Analytics” below. You can use the free tier without giving us anything.

If you make an account

WhatWhy
Email addressTo identify your account, confirm it, and send password resets. It is never used for marketing.
PasswordStored only as a salted hash by our authentication provider. Nobody — including us — can read it.
Display name, if you give oneSo the app can greet you by name. Optional, and you can leave it blank.
Your saved looks and imported shadersSo your work follows you between machines. Includes small preview images of your own visuals.
Your app settingsSo the instrument opens the way you left it.
Your plan and its statusTo know what your account can do.
A record of your purchase, if you bought oneWhich plan, which account, and Paddle’s reference for the order — so the licence can be switched on and found again if you write to us. No card details: those go to Paddle and never reach us.
A device identifier per machine you sign in onPaid plans allow a limited number of machines at once. This is a random string generated in your browser — not a hardware fingerprint, and not linked to anything outside Dancy Ants.
A support snapshot of your machineWhich browser and operating system, the name your graphics card reports, whether your browser supports WebGL2, and your screen size.

About that support snapshot

This one deserves an explanation rather than a table row.

Dancy Ants runs on your hardware, so when it fails it usually fails for a reason we cannot see: a graphics card that won't compile a shader, a browser without WebGL2, a microphone that was refused. Without knowing what your machine reported, "it doesn't work" is unanswerable.

It is one row per account, overwritten each time — not a history of where you have been. It contains no IP address, no fingerprint, and nothing that identifies you rather than the machine. It is never shared, never used for advertising, and it is deleted with your account.

Analytics

We use Umami, a privacy-focused analytics tool, hosted in the European Union. It is cookieless: nothing is stored on your device, no profile is built, and you are not followed across other websites. This is why you have not been asked to accept cookies.

What it records is which pages are visited, roughly where in the world from (country level), what kind of device and browser, and a set of anonymous product events — that a signup was started, that audio was switched on, that a look was saved. These are counts, not a record of you.

What it deliberately does not record: your email address, your name, your IP address, the names of shaders you import, the names of MIDI devices you own, or anything typed into the app. Event data is filtered before it is sent, and analytics data is deleted after six months.

Email

The only emails we send are the ones the service requires: confirm your address, reset your password, verify a change you asked for. There is no newsletter and no marketing list. If we ever start one, it will be opt-in — you will have to ask for it.

Who else touches your data

Running a service means using infrastructure providers. Each one below only processes data on our instructions, and only for its stated job.

ProviderDoes whatWhere
SupabaseAccounts, sign-in, and your saved workFrankfurt, Germany
NetlifyServes this websiteGlobal CDN
ResendDelivers account emailsIreland (EU)
UmamiAnonymous analyticsEuropean Union
PaddleSells the paid licences and takes the paymentUnited Kingdom

Paddle is different from the rest of that list

Everyone above processes data on our instructions. Paddle does not. Paddle.com Market Ltd is our online reseller and the merchant of record — legally, they sell you the licence, and we sell to them. That makes them an independent controller of what you type into their checkout, under their own privacy policy.

So: your name, billing address and card details go to Paddle, not to us. We never see or store a card number. What comes back to us is which plan was bought, for which account, and the identifier Paddle uses for the transaction — enough to switch your licence on and to find your order if you write to us, and nothing more.

If you have never bought anything, none of this applies to you: the free tier never touches Paddle at all.

We do not sell, rent, or trade your data. We do not share it with advertisers, data brokers, or AI training datasets. We would only disclose it if legally compelled to, and we would tell you unless the law forbade it.

What is stored on your device

Dancy Ants keeps things in your browser's local storage — your sign-in session, your saved looks, your settings, whether you have seen the tour. This is what makes the app work offline and open instantly. It is not a tracking cookie, it is never sent to advertisers, and clearing your browser data removes it.

How long we keep things

Your rights

If you are in the EU or UK, the GDPR gives you the right to see a copy of your data, correct it, delete it, take it elsewhere, or object to how it is used. We extend these rights to everyone, wherever you live, because having two standards would be silly.

Email hello@dancyants.com and we will act within 30 days, usually much sooner. Ask for deletion and we delete — you will not be talked out of it.

Our legal basis for handling account data is performing the contract you entered when you signed up. For anonymous analytics it is legitimate interest in understanding whether the product works, which is why no consent banner is required for it.

Children

Dancy Ants is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has made an account, email us and we will remove it.

Security

Traffic is encrypted with HTTPS. Passwords are hashed, never stored in readable form. Every table holding your work is protected by row-level security, so one account cannot read another's data even if a request tried to. Your account can use two-factor authentication, and we recommend it.

No service can promise it will never be breached. If one ever affected your data, we would tell you what happened and what to do about it, promptly and in plain language.

Changes

If this policy changes in a way that affects you meaningfully, we will email account holders rather than quietly editing the page and changing the date at the top.